9.8
Critique
CVE-2026-15435 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to…
Description
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to write arbitrary files on the system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| App Connect Enterprise 13.0 | 13.0.1.0 → 13.0.7.2 | Pas de correctif indiqué |
| App Connect Enterprise 12.0 | 12.0.1.0 → 12.0.12.27 | Pas de correctif indiqué |
Autres CVE de App Connect Enterprise
Les 34 CVE de App Connect Enterprise →
CVE-2026-92559
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due…
9.8
Critique
CVE-2026-17133
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
Élevée
CVE-2026-17156
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
Élevée
CVE-2026-17416
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to…
7.8
Élevée